Company has agreed to work with privacy commissioner to strengthen protections